Skills/Docker MCP Catalog/aws-appsync

aws-appsync@0.2.1

CAUTION

Publisher claims: "Manage applications powered by AWS AppSync." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Docker MCP CatalogPublisher awslabs · joined 0 days agoInstalls 0Last detonated 1 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Privileged sudo commandtests/test_validators.py:96 · Privileged sudo command — agent may execute with elevated privileges
AST05
HIGH
File permission modification commandDockerfile:71 · File permission modification command — agent changes file ownership/permissions
AST05
MEDIUM
URL using raw IP addresstests/test_create_datasource.py:53 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
MCP server using network transport (SSE/HTTP)README.md:38 · MCP server using network transport (SSE/HTTP) — data sent over network
AST04
MEDIUM
URL using raw IP addresstests/test_create_datasource.py:64 · URL using raw IP address — may bypass domain-based filtering
AST07
MEDIUM
URL using raw IP addresstests/test_create_datasource.py:52 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresstests/test_create_datasource.py:64 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresstests/test_create_datasource.py:53 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Outbound HTTP to raw IP addresstests/test_create_datasource.py:63 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addresstests/test_create_datasource.py:63 · URL using raw IP address — may bypass domain-based filtering
AST07
HIGH
Outbound HTTP to raw IP addresstests/test_create_datasource.py:54 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
HIGH
Hex-encoded URLtests/test_create_datasource.py:107 · Hex-encoded URL — attempt to bypass URL filtering
AST07
HIGH
Outbound HTTP to raw IP addresstests/test_create_datasource.py:52 · Outbound HTTP to raw IP address — may bypass domain-based monitoring
AST07
MEDIUM
URL using raw IP addresstests/test_create_datasource.py:54 · URL using raw IP address — may bypass domain-based filtering
AST07